4+ hour, 10+ min ago   (209+ words) Permify is an open-source authorization service that answers access questions at run time: can user X view document Y, which posts can members of team Y edit. It keeps those rules in one place, apart from the application code that…...

4+ day, 3+ hour ago   (352+ words) A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a web server,…...

4+ day, 3+ hour ago   (730+ words) Credential harvesting on developer machines has widened. Earlier infostealers worked from a short list of known targets, mostly browser stores and a few cloud credential paths. The families active now cast a much wider net. Shai-Hulud, for instance, ran a…...

4+ day, 19+ hour ago   (203+ words) AI agents today do more than answer questions. They access databases and applications, execute workflows, and make decisions inside live production environments. Traditional access controls can determine whether an agent is allowed into a system, but not whether every action…...

4+ day, 20+ hour ago   (21+ words) Orchid Security adds drift detection and kill switches for AI agents to help enterprises control access as autonomous AI adoption scales....

4+ day, 22+ hour ago   (508+ words) A rootkit found on hacked F5 BIG-IP APM devices skips the usual step of writing a web shell to disk, hiding it in memory instead, according to Sophos. F5 BIG-IP APM provides access policy enforcement to secure access to apps, APIs, and…...

4+ day, 23+ hour ago   (188+ words) Threat landscape is defined by speed and stealth as AI-driven attacks move faster than SOC teams can manually correlate, analyze, and remediate. Threatlabz, Zscaler’s global research team, is also seeing a rise in evasive tactics, including the use of trusted…...

5+ day, 5+ hour ago   (275+ words) The open source cleaner BleachBit reached version 6.0.4 this week, erasing caches, browser traces, and files on Windows, Linux, and now macOS. If you shredded a sensitive file on Windows with an earlier build, parts of it may still sit on…...

6+ day, 55+ min ago   (415+ words) Mathspace has confirmed that attackers broke into its internal reporting system through an unpatched Metabase vulnerability and stole data belonging to more than a million students, parents, and school staff. The Sydney-based maths education company wrote in a blog post…...

6+ day, 4+ hour ago   (153+ words) In this Help Net Security video, Dave Ross, Senior Director of the Intelligence Fusion Team at Intel 471, explains what happens behind the scenes during ransomware negotiations. Ross walks through the tactics groups use once an attack begins, from research on…...